0103659[.]com

This domain, 0103659.com, is flagged as a brand impersonation threat targeting Bet365, a well-known online gambling and sports betting platform. The site presents itself under the title "bet365官網365P.com-亚洲最佳娱乐公司," mimicking the legitimate Bet365 brand to deceive users into entering credentials or financial information. No explicit crypto drainer kit signatures were identified, but the domain’s infrastructure and content align with credential harvesting operations typical of phishing campaigns. Analysis indicates the domain was registered on November 16, 2020, through Dynadot LLC, a registrar frequently associated with malicious domains. It resolves to the IP address 45.204.23.4, located in Hong Kong under AS133448 (Korea). The domain is currently detected by 17 out of 95 security vendors on VirusTotal, reflecting a moderate-to-high confidence level in its malicious classification. It appears on two security blocklists (PhishDestroy and PhishingDB) but is not currently listed on Google Safe Browsing. The SSL certificate is issued by ZeroSSL, a common provider for both legitimate and malicious sites, offering no inherent trust indicators. As of the latest assessment, 0103659.com has been taken offline, likely due to enforcement actions by hosting providers or domain registrars. However, the domain remains registered and could be reactivated or repurposed for future campaigns. Organizations and users are advised to block the domain and its associated IP at the network level, monitor for residual DNS queries, and educate users about the risks of brand impersonation in the gambling and financial sectors. Persistent vigilance is recommended, as threat actors often reuse infrastructure for subsequent attacks.